Papers:

Errata: When we submitted our final draft of this paper to USENIX, our rate for the CSS Paint API-based attack was 3,000 URLs/second. I went back to clean up and optimize the code a few days later and ended up doubling that figure. The copy of the paper hosted here has been updated to reflect the final rate we attained for that attack.